IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
0answers
396 views

Route between two branch offices via IPsec VPN to head office?

I have TMG 2010 running on Server 2008 R2 in our head office with 2 branch offices connecting in using Dray Tek 2930 routers with IPsec site to site VPNS. The remote sites can route between the head ...
1
vote
0answers
657 views

Is it possible to do IPSec Site to Site VPN without static & public IP on one end?

I am working on a project for my engineering degree that requires me to interface with some pre-existing equipment, so I am rather limited on my options. I'm rather new to VPN and ipsec for that ...
1
vote
0answers
81 views

is there any cisco-compatible ipsec+comp module?

I am looking for a waqy to establish an Ipsec tunnel(with lzs-compression enabled) between a cisco router and a host(using strongswan or sth else). I can establish a tunnel without lzs-compression. ...
1
vote
0answers
93 views

Windows server 2003 ipsec error

I have a Windows Server 2003 domain controller and a bunch of clients. Something happened and now IPSec service fails on the server. After IPSec fails to start, all TCP/IP traffic is blocked to the ...
1
vote
0answers
2k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
1
vote
0answers
275 views

IPsec connection established but xl2tpd times out

This may or may not be related to my problem with passing ipsec verify. I have configured L2TP/IPsec VPN on Ubuntu 13.04 following Ubuntu's community documentation and while IPsec connection seems ...
1
vote
0answers
36 views

Multiple IPsec tunnels implented with raccon - need tunnel specific debug output

I have a network appliance box serving as an end point for several site to site IPsec VPN tunnels. raccon's docs specify that a log file can be written to with the -l option. My clunky approach to ...
1
vote
0answers
1k views

How Windows establishes L2TP/IPSEC VPN connection without “IPSec ID” (group id)?

I have a third-party VPN server configured with only 4 credentials given to me: server ip, preshared key, user name and user password. Under Windows 7, i can easily connect to this VPN via standard "...
1
vote
0answers
422 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
0answers
519 views

racoon pure IPSEC VPN, best way to give vpn server an IP address on the VPN?

We are testing a VPN server for DR. We have a rackspace cloud instance, with a pure IPSEC VPN server running in racoon, serving "road warrior" clients. We have some NAT going on on the server to route ...
1
vote
0answers
70 views

Windows 2k3 IPsec policy. Block all traffic prevents IPSec communication

I'm looking to harden down A Win2k3 server that talks to a branch over an IPsec tunnel based connection. Windows 2k3 firewall doesn't offer control of outbound communications, so I've turned to the ...
1
vote
0answers
2k views

ASA Slow IPSec Performance with Inconsistent Window Size

I have a IPSec link between two sites over ASA 5520s running 8.4(3) and I am getting extremely poor performance when traffic passes over the IPSec VPN. CPU on the devices is ~13%, Memory at 408 MB, ...
1
vote
0answers
249 views

Running a VPN server and a captive portal on the same machine with a DNS too

I don't know if this can be done but I'm asking anyways. Let's say that I've an Ubuntu machine with OpenSwan and xl2ptd to handle incoming VPN connections. Now, what I need to do is something like ...
1
vote
0answers
152 views

List of valid Vendor ID in Vendor ID payload

I have some logs from a VPN with lines like this one: Ignoring Vendor ID payload [4a131c8107035845...] Can I use the hexadecimal code there to identify what kind of hardware attempted to establish ...
1
vote
0answers
93 views

Can I make Windows 7 process the IPsec INITIAL-CONTACT message?

Windows 7 seems to ignore the IPsec INITIAL-CONTACT notification described in RFC 2407. Is there a setting to make it process the message? When Windows receives the notification, it should delete its ...
1
vote
0answers
726 views

Android devices fail to connect to MS L2TP PSK

I have configured MS Server 2003 RRAS with IPSec / L2TP using PSK. iPhone devices connect fine however Android devices fail to connect. The MS "Oakley" trace file shows the negotiations for Apple and ...
1
vote
0answers
730 views

L2TP & IPSec (OpenSwan) on Centos time out when connecting

I'm having big trouble setting up a very simple VPN. Using Centos 6. My Server Address : 61.34.26.32 (fictive) Whenever I try to connect (from iPhone5 or MacOS X) i get a connection timeout. I ...
1
vote
0answers
178 views

Peer to peer ipsec tunnel - virtual network interface

I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode. I think I can cope with all those add and spdadd, but how to create a virtual ...
1
vote
0answers
144 views

IPSEC-tools config

Once I run setkey with the following config file, add 1.1.1.1 2.2.2.2 esp 2000 -E aes-ctr 0x3333333333333333333333333333333333333333; add 3.3.3.3 2.2.2.2 esp 2000 -E aes-ctr ...
1
vote
0answers
756 views

iPhone doesn't save password for Cisco IPsec VPN using racoon daemon

On my Debian server I had set up racoon daemon (1:0.8.0-14) for Cisco IPSec VPN using certificates for authentication. My racoon.conf is like following: log info; path certificate "/etc/racoon/certs";...
1
vote
0answers
7k views

pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)

Good morning, I'm trying to setup an IPSec Tunnel on a pfSense firewall. I have 2 interfaces configured: WAN (public firewall IP: .../31) LAN (internal static IPs: 192.168.104.0/29) I set up the ...
1
vote
0answers
2k views

Strongswan configuration to Cisco

We have an issue configuring Strongswan to a Cisco router. The connection is made, but I'm not getting the routing correct. There are multiple networks behind the router on the remote side (operated ...
1
vote
0answers
607 views

Linux IPsec VPN and SNAT

I'm trying to connect my network to an IPSec VPN, and for this my connexions need to come from a given domain. The network is the following: Internal network eth1:10.0.0.1/14 eth0:1.2.3.4 ----...
1
vote
0answers
223 views

cisco hub-spoke ipsec vpn, ping between spokes

I have a hub-spoke vpn setup between different locations, Hub: 10.10.10.0/24 A: 192.168.2.0/24 B: 192.168.41.0/24 There is ipsec vpn tunnel between Hub-A, and Hub-B, and the connection is fine. ...
1
vote
0answers
537 views

Deciphering IPSEC errors

I have a host I am trying to setup for ipsec. But I am finding some errors in the log that don't make much sense to me. The system are Rhel 5.5 boxes. I followed RHEL's IPSec deployment directions ...
1
vote
0answers
23k views

Fortigate Remote VPN : no matching gateway for new request

I am trying to configure a Fortigate 60C to act as an IPSec endpoint for remote VPN. I configured it like this : SCR-F0-FGT100C-1 # diagnose vpn ike config vd: root/0 name: SCR-REMOTEVPN serial: 7 ...
1
vote
0answers
114 views

My IPSec VPN isn't allowing me to connect

I'm following this guide to create an IPsec VPN on a debian server. I followed all the steps, and it still isn't working. If I try connecting to it, I get an error. I've looked for the logs, but I'm ...
1
vote
0answers
18 views

Issues with enpoint mapper service

In short, we have a VPN server and an AD server. The VPN server is our connection to a remote AD server. From the VPN server, I can use port query to verify that port 135 is not filtered and it ...
1
vote
0answers
77 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
441 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
1
vote
0answers
331 views

Cisco RV220W ipsec with wrong ip packets

I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip. The vpn tunnel is ...
1
vote
0answers
413 views

SMB over IPSec prompting for credentials

I am trying to connect our web server to customers SQL/file server through a VPN tunnel. Originally we had setup a PPTP VPN and I was able to access their file shares without issue. Since PPTP ...
1
vote
0answers
5k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
0answers
2k views

IPSec VPN login failing with certificate authentication

I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
1
vote
0answers
496 views

ipsec tunnel connectivity issue

I trying to connect Solaris 10 box to Cisco PIX with IPsec tunnel. And it seem halt at some point. And from the post @ http://www.mail-archive.com/networking-discuss@opensolaris.org/msg07573.html ...
1
vote
0answers
3k views

Openswan Ubuntu Malformed Packet

I'm trying to create an IPSec encrypted VPN tunnel to a Cisco ASA 5540 from a ubuntu server using openswan. I've set up VPN connections before to Cisco routers, so this task didn't seem like it would ...
1
vote
0answers
645 views

How to allow RDP through IPSEC using netsh advfirewall command

I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
1
vote
0answers
306 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
1
vote
0answers
153 views

Windows IPSec Filter Sanity Check

I'm installing NSClient++ so our Nagios system can monitor some windows servers using NRPE. I need to punch a hole in our IPSec policy to allow inbound connections on port 5666 from the Nagios server. ...
0
votes
0answers
18 views

How to fix failing connection to VPN(ipsec+ikev2)?

Auth made with certificates ubuntu 16.04 + strongswan. Client connecting from win7, certificate was added like said in strongswan Wiki. Config made also like in strongswan wiki, but i got error: '...
0
votes
0answers
10 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
0
votes
0answers
17 views

L2TP gives error 410 on attempt to connect to VPN

I'm getting error 410 while trying to connect via L2TP. This error occurs very often, but sometimes I'm able to connect, which leads to a fact that I configured everything properly. I have Ubuntu 14....
0
votes
0answers
10 views

OpenSwan IPsec VPN server not responding to remote router DPD packets

We have setup a IPsec connection, on an Ubuntu server, with OpenSwan IPsec implementation (version U2.6.38/K3.13.0-24-generic). The connection establishes successfully, but around a minute later (...
0
votes
0answers
12 views

L2TP and Openswan NAT

I have a connection between a local CentOS7 machine and a remote customer server connected via L2TP. I can communicate CentOS7 <--> Customer flawlessly, but the problem begins when I try to ...
0
votes
0answers
21 views

IPsec with EC2 client and Elastic IP, but nat_traversal=no

After researching this quite a bit, I feel I may be asking the impossible here, but I thought I'd give it a shot. I'm trying to configure an Openswan IPsec client on an EC2 server (inside VPC, if it ...
0
votes
0answers
15 views

“The session has been cancelled” in Windows Firewall IPSEC

I have a bit of a head scratcher. For some reason a couple of my 2012r2 boxes aren't able to establish Quick Mode connections. Main mode is established just fine. This only happens after the ...
0
votes
0answers
59 views

IPSEC passes only ICMP

I have FreeBSD and Mikrotik with IP 1.1.1.1 and 2.2.2.2. Local subnets are 192.168.1.0/24 and 192.168.2.0/24. Firewall is disabled for testing. I am bringing up gre tunnel between them. FreeBSD: ...
0
votes
0answers
17 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
0
votes
0answers
11 views

IPSEC VPN point-to-site connection works but remote network is not rechable

I have a probelm with ipsec configuration. I have to connect to remote network (client! to site), where is Fortigate firewall. On left side (where I have access, this is my dedicated server), I have a ...
0
votes
0answers
52 views

IPSec VPN between Fortigate 5.2 and Linux with ipsec-tools - data does not pass

We have an IPSec VPN tunnel between Fortigate device and Linux box running racoon and ipsec-tools. The setup worked in Fortigate 4.X, but with 5.2 the SAs are negotiated OK and no traffic can be ...